johnl-oai 830363bd7c Add experimental Windows sandbox service provisioning (#42353) ...

## What changed

- Add the default-off `windows_sandbox_service` feature and expose it through
  app-server experimental feature enablement.
- When enabled, attempt service provisioning during elevated Windows sandbox
  setup, using the effective network proxy ports and listener roles. Continue
  through the existing setup path when the service is unavailable or the
  configuration is unsupported.
- Report unsupported Codex home drives as service unavailability so the client
  can fall back to the elevated helper.

## Testing

- Add a Windows-only unit test covering HTTP and SOCKS listener derivation from
  the effective proxy configuration.

GitOrigin-RevId: 40b119cf51f84e5d0e94d6a0a8d5b506d1123526

2026-09-02 20:30:45 +00:00

..

account_processor

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

apps_processor

Attach verified access context to eligible plugin MCP calls (#41005)

2026-08-27 00:02:26 +00:00

plugins

Prefer remote Sites over the bundled plugin (#42100)

2026-09-01 16:58:54 +00:00

remote_control_processor

feat(app-server): add remote control pairing status RPC (#26450)

2026-06-05 10:33:56 -07:00

account_processor.rs

Show actionable rate-limit banners in the TUI (#41742)

2026-08-31 00:20:06 +00:00

apps_processor.rs

Remove the workspace settings gate for apps and plugins (#38994)

2026-08-17 12:26:59 +00:00

bedrock_auth.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

catalog_processor.rs

Treat bundled cleanup hooks as built-ins (#42110)

2026-09-01 18:02:27 +00:00

command_exec_processor.rs

Preserve managed deny-read rules across permission updates (#40004)

2026-08-21 20:15:23 +00:00

config_errors.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

config_processor.rs

Add experimental Windows sandbox service provisioning (#42353)

2026-09-02 20:30:45 +00:00

diagnostics.rs

Expose app-server diagnostics through the experimental API (#37470)

2026-08-07 16:57:47 +00:00

environment_processor.rs

Cache executor metadata from initialization (#40343)

2026-08-24 06:43:07 +00:00

feedback_doctor_report.rs

Bound SQLite integrity checks for diagnostic attachments (#40688)

2026-08-25 20:09:55 +00:00

feedback_processor.rs

Make diagnostic report uploads resilient to slow networks (#42096)

2026-09-01 16:49:16 +00:00

feedback_thread_index_tests.rs

Improve Guardian report diagnostics (#42033)

2026-09-01 11:14:20 +00:00

feedback_thread_index.rs

Improve Guardian report diagnostics (#42033)

2026-09-01 11:14:20 +00:00

fs_processor.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

git_processor.rs

…

initialize_processor.rs

Negotiate MCP extensions per app-server session (#36910)

2026-08-04 15:23:43 +00:00

marketplace_processor.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

mcp_event_stream.rs

Add app-server MCP event streaming (#39761)

2026-08-20 17:49:35 +00:00

mcp_processor.rs

Improve sandboxing, MCP errors, and cached approvals (#41196)

2026-08-27 20:05:08 +00:00

persisted_resume_settings_tests.rs

Persist response token usage in rollout history (#41912)

2026-08-31 21:15:38 +00:00

persisted_resume_settings.rs

Restore permission profiles when resuming threads (#39153)

2026-08-18 06:22:04 +00:00

plugins.rs

Support remote marketplaces in the plugin CLI (#42150)

2026-09-01 22:51:14 +00:00

process_exec_processor.rs

Prevent launch context from reaching child processes (#37607)

2026-08-08 16:58:26 +00:00

projects.rs

Add recency sorting to project/list (#41223)

2026-08-27 23:43:46 +00:00

remote_control_processor.rs

feat(app-server): enforce managed remote control disable (#27961)

2026-06-12 20:10:12 -07:00

request_errors.rs

Separate Codex error details from retry metadata (#34996)

2026-07-23 19:32:26 +00:00

search.rs

…

thread_delete.rs

Enforce writer ownership for thread archive and deletion (#35031)

2026-07-23 23:18:06 +00:00

thread_enrichment.rs

Expose model settings in app-server thread metadata (#42151)

2026-09-01 22:56:18 +00:00

thread_fork_goal.rs

Preserve thread context when retrying or editing turns (#33211)

2026-07-15 02:35:49 +00:00

thread_goal_processor.rs

Restore thread cwd from owned settings snapshots (#41567)

2026-08-29 19:57:06 +00:00

thread_input.rs

Enforce subagent ownership across app-server inputs (#40464)

2026-08-24 19:44:14 +00:00

thread_lifecycle.rs

Make the app-server thread unload delay configurable (#42320)

2026-09-02 18:18:54 +00:00

thread_processor_tests.rs

Skip Guardian reviews in Full Access (#42147)

2026-09-01 22:16:54 +00:00

thread_processor.rs

Make the app-server thread unload delay configurable (#42320)

2026-09-02 18:18:54 +00:00

thread_queue_processor.rs

Enforce subagent ownership across app-server inputs (#40464)

2026-08-24 19:44:14 +00:00

thread_resume_redaction.rs

Add structured asynchronous user input requests (#42178)

2026-09-02 02:09:35 +00:00

thread_sections.rs

Add appearance metadata to thread sections (#37898)

2026-08-10 23:32:42 +00:00

thread_summary_tests.rs

feat(rollout): persist TurnItems for paginated thread rollouts (#30188)

2026-07-08 19:55:03 -07:00

thread_summary.rs

Expose model settings in app-server thread metadata (#42151)

2026-09-01 22:56:18 +00:00

token_usage_replay.rs

Add structured asynchronous user input requests (#42178)

2026-09-02 02:09:35 +00:00

turn_processor.rs

Support durable reasoning configuration updates (#42328)

2026-09-02 18:52:44 +00:00

windows_sandbox_processor.rs

Add experimental Windows sandbox service provisioning (#42353)

2026-09-02 20:30:45 +00:00